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AMENDMENTS TO THE DRAWINGS 

Proposed drawing changes are shown on the attached annotated marked up 
drawing and are incorporated within an attached proposed replacement sheets of 
drawings. 
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Annotated Sheet Showing Changes 
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REMARKS/ARGUMENTS 

Reconsideration of this application is respectfully requested. 

The rejection of claims 1-4, 1 1-15, 19, 22, 28, 30-32 and 34-36 under 35 U.S.C. 
§102 as allegedly anticipated by Hile ' 776 is respectfully traversed. 

As will be noted above, all claims except claims 3 1-32 are limited so as to require 
virus detection to take place by analyzing traffic log data defining at least one traffic 
characteristic of electronic messaging activity. Accordingly, claims 1-30 and 33-36 will 
be discussed separately below: 

As for claims 31-32, the Examiner relies upon Hile at column 10, lines 19-24 as 
allegedly anticipating the entirety of each claims 3 1 and 32. However, the language from 
this section of Hile (and quoted by the Examiner) merely notes that embodiments of Hile 
could be created in languages other than the C programming language. Claims 3 1 and 
32, on the other hand, require the computer program stored on an tangible storage 
medium, when executed, to perform five specifically enumerated steps. Although the 
Examiner has quoted the applicant's claim language for these five steps, the Examiner 
has not explained how or where these five steps are in found in the Hile '776 teaching. 

As for the remaining claims, Hile relates to a system for detecting viruses in which 
the files in question are themselves scanned or tested for known virus signatures — see 
1:58 and 4:58. However, in claims 1-30 and 33-36, the file itself does not have to be 
tested. The claimed invention uses traffic log data (relating to one or more traffic 
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tested. The claimed invention uses traffic log data (relating to one or more traffic 
characteristics - examples of log data are given at page 2, line 24 of the present 
application). There is no mention or suggestion in Hile of using log data relating to one 
or more traffic characteristics as specified in the applicant's independent claims 1,12, 20, 
23 and 36. 

The rejection of claims 5-10, 16-18, 20, 21, 25-29 and 33 under 35 U.S.C. §103 as 
allegedly being made "obvious" based on Hile in further view of Kim '440 is also 
respectfully traversed. 

Fundamental deficiencies of Hile have already been noted above with respect to 
independent claims. Kim does not supply those deficiencies. Indeed, Kim also discloses 
a system in which the files themselves are scanned for viruses. Accordingly, it is not 
believed necessary at this time to discuss the additional deficiencies of this allegedly 
"obvious" combination of references with respect to other features of the rejected claims. 

The rejection of claims 23 and 24 under 35 U.S.C. §103 as allegedly being made 
"obvious" based on Hile in further view of Milosvsky '787 is also respectfully traversed. 

Once again, fundamental deficiencies of Hile have already been noted above with 
respect to parent claims. Milosvsky does not supply those deficiencies. Actually, 
Milosvsky is concerned with routing and logging emails - but not with detecting new 
and unknown viruses. 
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Accordingly, it is not believed necessary to discuss the additional deficiencies of 
this allegedly "obvious" combination of references with respect to other additional 
features of the rejected claims. 

There being no other outstanding ground of objection/rejection, it is believed that 
this entire application is now in condition for allowance and a formal Notice to that effect 
is respectfully solicited. 
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